Sysadmin/Add virtual machine: Difference between revisions

No edit summary
No edit summary
Line 4: Line 4:
organizations.
organizations.


=== Create new VM on [[Machine/treehouse]] or [[Machine/housetree]] ===
=== Create new VM on [[Machine/justice]] or [[Machine/freedom]] ===


This procedure creates a clone of the [[Sysadmin/Template virtual machine]].
This procedure creates a clone of the [[Sysadmin/Template virtual machine]].


virsh vol-create-as treehouse FOOBAR-root 10G
  virt-clone --prompt -o template-precise --file=/var/lib/libvirt/images/boot/pootle-boot.img --file=/dev/justice/FOOBAR-root -n FOOBAR
  virt-clone --prompt -o template-lucid --file=/dev/treehouse/FOOBAR-root -n FOOBAR
  virsh start --console FOOBAR
  virsh start --console FOOBAR


Line 22: Line 21:
* change machine fqdn
* change machine fqdn


  sed -i -e s/template-lucid/FOOBAR/ /etc/hostname /etc/postfix/main.cf
  sed -i -e s/template-precise/FOOBAR/ /etc/hosts /etc/hostname /etc/mailname /etc/postfix/main.cf
 
* fix /etc/hosts
 
vim /etc/hosts


* activate new IP and hostname
* activate new IP and hostname
Line 36: Line 31:
  aptitude update
  aptitude update
  aptitude full-upgrade
  aptitude full-upgrade
* Find a nice color combo for HOST_COLOR in /etc/zzz_profile.conf


* generate host keys and a key for root
* generate host keys and a key for root


  ssh-keygen -N "" -f /etc/ssh/ssh_host_rsa_key -t rsa
  rm /etc/ssh/ssh_host_*
  ssh-keygen -N "" -f /etc/ssh/ssh_host_dsa_key -t dsa
  dpkg-reconfigure openssh-server
  ssh-keygen -N "" -f /root/.ssh/id_rsa -t rsa
  ssh-keygen -N "" -f /root/.ssh/id_rsa -t rsa


* Install <code>/root/.ssh/id_rsa.pub</code> key on <code>sugarbackup@backup.sugarlabs.org</code>
* Setup wizbackup on backup server (See [[Service/backup]]
 
* Setup backups
 
vi /etc/system-full-backup.conf
 
* Log in for the first time on backup server to accept ssh fingerprint
 
ssh sugarbackup@backup.sugarlabs.org


* Move daily, weekly, monthly cronjobs to a unique timeslot to avoid cpu/net storms
* Move daily, weekly, monthly cronjobs to a unique timeslot to avoid cpu/net storms